Host Based Intrusion Detection System

Intrussion detetion analyzes unauthorized accesses and malicious behaviors and finds intrussionn behaviors and attempts by detecting the state and activity of an operation system to provide an effective means for intrussion defense. Applying the intrussion detetion technology to databases is an effective method of enabling databases to have positive and active security mechanisms. This paper makes an intensive study of a database intrussion detetion technology, especially an anomaly detetion technology based on data mining first and then puts forward a kind of realization based on Trie tree for the classical algorithm of association rules—Apriori and finally uses Apriori algorithm to realize the extraction of user The intrussion detetion system (IDS) is a particular procedure that is used to identify intruders by analyzing user behavior in the system after the user logged in. Host-based IDS monitors user behavior in the computer and identify user suspicious behavior as an intrussion or normal behavior. This paper discusses how an expert system detects intrussions using a set of rules as a pattern recognized engine. They proposed a PIDE (Pattern Based Intrussion Detetion) model, which is verified previously implemented SBID (Statistical Based Intrussion Detetion) model.